ec9d681b0f2b6b4f5579c4133d519c00121ad66f2fb6dc7ed6d9619b7d2e47bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec9d681b0f2b6b4f5579c4133d519c00121ad66f2fb6dc7ed6d9619b7d2e47bb
Size

325KB
Sample

221029-pdefqsfhem
MD5

9ca5e229cbb590663ededad8ecbb9dbe
SHA1

76b4ad7eac2db10301a4c7a3459a771497476a14
SHA256

ec9d681b0f2b6b4f5579c4133d519c00121ad66f2fb6dc7ed6d9619b7d2e47bb
SHA512

b48183ebc062d2125d66404f4b0e25c2a89faecfd4a3ef9e7fcd715600844bf75a758b1a1aa501360c6f08f73eef4d97a3f5da15cd233617bcef805f3c989a1a
SSDEEP

6144:WQl313aAKsdIT+LmZmz6dQ0np2q17TqnX49OohrF4BbXP7g:XlF3Mn6LY+0npX1inX49OQrOlXP7g

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  ec9d681b0f2b6b4f5579c4133d519c00121ad66f2fb6dc7ed6d9619b7d2e47bb
- Size
  
  325KB
- MD5
  
  9ca5e229cbb590663ededad8ecbb9dbe
- SHA1
  
  76b4ad7eac2db10301a4c7a3459a771497476a14
- SHA256
  
  ec9d681b0f2b6b4f5579c4133d519c00121ad66f2fb6dc7ed6d9619b7d2e47bb
- SHA512
  
  b48183ebc062d2125d66404f4b0e25c2a89faecfd4a3ef9e7fcd715600844bf75a758b1a1aa501360c6f08f73eef4d97a3f5da15cd233617bcef805f3c989a1a
- SSDEEP
  
  6144:WQl313aAKsdIT+LmZmz6dQ0np2q17TqnX49OohrF4BbXP7g:XlF3Mn6LY+0npX1inX49OQrOlXP7g
Score

6^/10

discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2